Security & Compliance.
How we approach security, privacy and compliance.
Ramexa Technologies helps organisations build and operate secure, reliable systems. This page summarises how we approach security, privacy and compliance. It is an honest overview, not a certification claim — we are a young firm and we state plainly what we can and cannot provide.
1. Our approach
We apply least-privilege access, defence in depth, infrastructure-as-code and continuous monitoring across the platforms we design and manage. Compliance is treated as an outcome of good engineering practice rather than a one-off exercise.
2. Standards we work to
We do not claim certifications we have not earned. Ramexa Technologies does not currently hold any independent third-party certifications such as ISO/IEC 27001 or SOC 2. Our engineering follows widely recognised security and privacy practices, and we are ready to work within the frameworks our clients are subject to. Where an engagement calls for a specific standard, we align our controls to it and cooperate with your audits and due-diligence requests.
- ISO/IEC 27001: our information-security practices are informed by its management principles.
- SOC 2: we can map our controls to the security, availability and confidentiality criteria.
- GDPR / UK GDPR: we can enter into a data processing agreement (DPA) to handle EU/UK personal data.
- India DPDP Act, 2023: we handle personal data in line with the Act.
- HIPAA: we can work under a business associate agreement (BAA) for protected health information.
- PCI-DSS: we help reduce scope and follow cardholder-data awareness requirements.
Nothing on this page is a certification claim. Any framework support, evidence or documentation is agreed per engagement and confirmed in writing before work begins.
3. Data protection
We handle personal data in line with our Privacy Policy. Where we process personal data on your behalf as a processor, we do so under a data processing agreement (DPA) and follow your documented instructions.
4. Security practices
- Identity and access management with multi-factor authentication and least privilege.
- Encryption of data in transit, and at rest where the platform supports it.
- Logging, monitoring and alerting for security-relevant events.
- Vulnerability management and timely patching.
- Secrets management and separation of environments.
- Change control and peer review for production changes.
5. Responsible disclosure
If you believe you have found a security vulnerability in our Site or services, please contact us at info@ramexatech.com with enough detail to reproduce the issue. We ask that you do not access, modify or disclose data that does not belong to you, and we will investigate promptly.
6. Due-diligence requests
For security questionnaires, DPAs, sub-processor lists or compliance documentation, contact info@ramexatech.com or +91-7444063078. We respond to reasonable requests as part of a sales or contracting process.